decima2 (>=0.1.0 <=0.2.1), gpbench (>=1.0.3 <=1.2.2) +8 more potentially affected by CVE-2025-9906 via keras (>=3.0.0 <=3.10.0)

keras PYPI version =3.0.0, =0.1.0, =1.0.3, =0.0.28, =2.4.0, =0.1.0, =0.1.1, =1.1.0, =1.0.0, =1.2.0 Source cves: CVE-2025-9906 Source advisory: SNYK:PYTHON-KERAS-12927178...

Malicious code in validator-utils-pro (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1fe16686eac8cc9669d7b7cb7b2fb58b8ee27416f8281bf10cabe5710fff4618 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious Package

Overview validator-utils-pro is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

CVE-2025-10671 youth-is-as-pale-as-poetry e-learning JWT Token JwtUtils.java encryptSecret random values

A vulnerability has been found in youth-is-as-pale-as-poetry e-learning 1.0. Impacted is the function encryptSecret of the file e-learning-master\exam-api\src\main\java\com\yf\exam\ability\shiro\jwt\JwtUtils.java of the component JWT Token Handler. The manipulation leads to insufficiently random...

Malicious code in regex-validator-utils (npm)

The package regex-validator-utils was found to contain malicious code...

MAL-2025-47440 Malicious code in regex-validator-utils (npm)

The package regex-validator-utils was found to contain malicious code...

Malicious code in @operato/utils (npm)

The package was compromised and malicious code added. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bf515160f453156c824533ed3660e80cbccfdf705ed5374cdcf987a18d6d44ee Any computer that has this package installed or running should be considered fully compromised. All...

MAL-2025-47263 Malicious code in @operato/utils (npm)

The package was compromised and malicious code added. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bf515160f453156c824533ed3660e80cbccfdf705ed5374cdcf987a18d6d44ee Any computer that has this package installed or running should be considered fully compromised. All...

Malicious code in @openzeppelin-compact/utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9559f883ef8ce66f28f6c6f0e338ec3c10d5ba28c0e2dd2c7133f5268f7e539f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious Package

Overview @openzeppelin-compact/utils is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this...

MAL-2025-47252 Malicious code in @openzeppelin-compact/utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9559f883ef8ce66f28f6c6f0e338ec3c10d5ba28c0e2dd2c7133f5268f7e539f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious Package

Overview xo-angular-ui-utils is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Malicious code in @teselagen/sequence-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3a11d947c98673c88f928f02f1c998436f5b00cafcbb36643500a2d0858b8aba Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @teselagen/range-utils (npm)

The package was compromised and malicious code added. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 571569342ec123b762a26cd4f5e8bb33deab6759b0b59a9a14ca7f161a30b3b0 Any computer that has this package installed or running should be considered fully compromised. All...

MAL-2025-47273 Malicious code in @teselagen/file-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7da1a31ac60a5206e526134aa3bb58f83fa6e2d32f66cacf06f26a91de3b71f3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @nstudio/xplat-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 57e90dbbaadf86b3e06a0b86bc92cf8e5545e60cf5c09fdfe1d22e59e56c67b1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-47170 Malicious code in @nstudio/xplat-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 57e90dbbaadf86b3e06a0b86bc92cf8e5545e60cf5c09fdfe1d22e59e56c67b1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

@ottimis/angular-utils (>=1.3.36 <=5.6.1), @solidpepper/solidpepper-modal-media-selection (>=1.0.2 <=1.0.5) +3 more potentially affected by unknown CVE via ng2-file-upload (=9.0.0)

ng2-file-upload NPM version =9.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on ng2-file-upload and may be impacted: - @ottimis/angular-utils =1.3.36, =1.0.2, =1.4.1-A20, =0.1.4, =0.1.31 Source cves: unknown CVE Source advisory:...

@nstudio/focus (>=20.0.0 <=20.0.3) potentially affected by unknown CVE via @nstudio/xplat-utils (>=20.0.0 <=20.0.3)

@nstudio/xplat-utils NPM version =20.0.0, =20.0.0, =20.0.3 Source cves: unknown CVE Source advisory: SNYK:JS-NSTUDIOXPLATUTILS-12744505...

@teselagen/bio-parsers (>=0.1.24 <=0.4.32), @teselagen/ove (>=0.0.18 <=0.8.24) +3 more potentially affected by unknown CVE via @teselagen/range-utils (>=0.1.18 <=0.3.14-beta.3)

@teselagen/range-utils NPM version =0.1.18, =0.1.24, =0.0.18, =0.1.19, =18.2.35, =18.3.6, =18.3.24 Source cves: unknown CVE Source advisory: SNYK:JS-TESELAGENRANGEUTILS-12744521...